CVE-2021-37160

A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There is no firmware validation e.g., cryptographic signature validation during a File Upload for a firmware update...

CVE-2021-37161

CVE-2021-37161 describes a buffer overflow in the Swisslog Healthcare Nexus Panel’s HMI3 Control Panel (pre Nexus Software 7.2.5.7) that can overwrite an internal queue data structure and lead to remote code execution. The impact is high (network, no auth, no user interaction). Remediation: upgra...

CVE-2021-37165

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead t...

CVE-2021-37165

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead t...

CVE-2021-37165

Technical details about CVE-2021-37165 are not publicly available in the provided Connected documents. The initial description notes a buffer overflow enabling remote code execution in Nexus Panel software prior to 7.2.5.7, but no confirmed exploit or remediation is documented here.

CVE-2021-37165

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead t...

PT-2021-21541

Name of the Vulnerable Software and Affected Versions Swisslog Healthcare Nexus Panel versions prior to 7.2.5.7 Description A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel. This issue allows an attacker to overwrite an internal...

PT-2021-21545

Name of the Vulnerable Software and Affected Versions Swisslog Healthcare Nexus Panel versions prior to 7.2.5.7 Description A buffer overflow issue was discovered in the HMI3 Control Panel. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the...

PT-2021-21542

Name of the Vulnerable Software and Affected Versions Swisslog Healthcare Nexus Panel versions prior to 7.2.5.7 Description A buffer overflow issue was discovered in the HMI3 Control Panel. If an attacker sends a malformed UDP message, a buffer underflow occurs, leading to an out-of-bounds copy a...

PT-2021-21543

Name of the Vulnerable Software and Affected Versions Swisslog Healthcare Nexus versions prior to 7.2.5.7 Description An insecure permissions issue was discovered in the HMI3 Control Panel of Swisslog Healthcare Nexus. The device has two user accounts with hardcoded passwords. Recommendations For...

PT-2021-21540

Name of the Vulnerable Software and Affected Versions Swisslog Healthcare Nexus Panel versions prior to 7.2.5.7 Description A firmware validation issue was discovered in the HMI3 Control Panel. The issue arises from the lack of firmware validation, such as cryptographic signature validation, duri...

PT-2021-21544

Name of the Vulnerable Software and Affected Versions Swisslog Healthcare Nexus Panel versions prior to 7.2.5.7 Description A buffer overflow issue was discovered in the HMI3 Control Panel. The issue occurs in the tcpTxThread function, where received data is copied to a stack buffer, potentially...

PT-2021-21546

Name of the Vulnerable Software and Affected Versions Swisslog Healthcare Nexus Panel versions prior to 7.2.5.7 Description A buffer overflow issue leading to denial of service was discovered in the HMI3 Control Panel. When HMI3 starts up, it binds a local service to a TCP port on all interfaces ...

CVE-2021-37162: Buffer Copy without Checking Size of Input

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. If an attacker sends a malformed UDP message, a buffer underflow occurs, leading to an out-of-bounds copy and possible remote co...

CVE-2021-37164: Out-of-bounds Write

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a...

CVE-2021-37163: Use of Hard-coded Credentials

An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software 7.2.5.7. The device has two user accounts with passwords that are hardcoded...

CVE-2021-37166: Buffer Copy without Checking Size of Input

A buffer overflow issue leading to denial of service was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When HMI3 starts up, it binds a local service to a TCP port on all interfaces of the device, and...

CVE-2021-37161: Buffer Copy without Checking Size of Input

A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, operated by released versions of software before Nexus Software 7.2.5.7. A buffer overflow allows an attacker to overwrite an internal queue data structure and can lead to remote...

CVE-2021-37160: Improper Verification of Cryptographic Signature

A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There is no firmware validation e.g., cryptographic signature validation during a File Upload for a firmware update...

CVE-2021-37165: Buffer Copy without Checking Size of Input

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead t...